Microsoft在您的BEC和API调用中审核事件响应的邮箱项目访问RichardSmith

Microsoft at your BEC and (API)CallRichard Smith, Senior Consultant (Security Risk Advisors)October20242WHOISI’m Richard Smith, a Senior Consultant with Security Risk Advisors. ╺4yearscybersecurityexperience-SOCdefense&leadership-CySA+-DevOps engineering╺10 years infrastructure IT experience-DesktopIT-Systems and Network Administration-Virtualization (VMware, Nutanix, Citrix)Email: richard.smith@sra.io1.StorytimeAreyousittingcomfortably?Meet Jim•Jim is the CISO at St Quentin’s Hospital, a medium-sized health care organization.•TheyuseMicrosoft365foremail.•They’re cost-conscious, but in a highly-regulated industry. •Securing PHI/PII is of vital importance.Jim is very concerned…5•…aboutthenumber,scope,andcostofBusinessEmailCompromise attacks.•The costofabreachcanbecripplinglyhigh.Ifthere is a cyber incident…╺Like, say, a compromised user account…╺…that hasaccess to a mailbox…╺…that containssensitive information…6Howdo you knowwhat the hacker saw?╺Previously, due to audit gaps caused by